openVPN different sites same WAN IPs (tricky homeBrew)
-
Don't put any hosts in one of the 10.0.0.0/24 networks and you'll be fine.
@noplan said in openVPN different sites same WAN IPs (tricky homeBrew):
those IPs are gonna change every 8 hours
Nasty stuff, means the pipe goes down during working hours?!
-Rico
-
@noplan said in openVPN different sites same WAN IPs (tricky homeBrew):
those IPs are gonna change every 8 hours (therefore the dyndns accoounts)
WTF? That's against any regulation I'm aware of.
-
-Rico
-
8 hours yes i dont know why but thats what the log files say
i hope its not worse and configured als on demand connect ... oh boy we got some crazy stuff here ;)when the pipe goes down there will be the next issuse how to bring the tunnel up again
(watchdog ? )there is no other way than dyndns (at the moment)
as far as i got the memo the 10.0.0.0/24 network is only used by the Provider Modem and the WAN interface of the pfS box.
i'll give it a try tomorrow to set up openVPN Server on each color ;)
not thinkin thaht this will be fun ;) -
OpenVPN tries to (re)connect infinite by default.
-Rico
-
@Rico
oh yesss ... thanks -
You need to take care about the DynDNS to update the IPs as fast as possible then.
-Rico
-
yes that will be a challenge,
i'm not sure whats a better way to go get a goDaddy DynDns or use dynDns pro accounti dont like this setup, these 8 hours .... SO NOT COOL !
-
As long as you can do DynDNS to the "real" address it's probably fine. Though depending on your budget and throughput needs it might be more stable if you had a hosted/DC/cloud/whatever type server with a static address and then all these dynamic clients connect to that. Then their address changes wouldn't matter. They'd timeout and reconnect in 60s and that's that.
-
yes i can get dyndns working with the real IP assigned by the ISP
so something like this
purple ... 62.116.x.y ... dyndns1.dyndns.org
yellow ... 91.113.x.y ... dyndns2.dyndns.org
green ... 194.96.x.y ... dyndns3.dyndns.orgthe budget in COVID times is slim to n00thing
thx for the hint with the static IP gonna look into it.